General
- Target PURCHASE ORDER.exe
- Size 835KB
- Sample210609-wfd1gfvm9x
- SHA256 682ea743ceb920ea2f5fa8cb8e8e30aea2aaaaccd90c9cfbeb446a2225e024fe
- MD5 6d06a8c0a9d0c0fb69187d7bdd4d4c03
- SHA1 703e55f988e5608eaaf0e5e3d68e86134c0ad023
- SHA512 095f5250fc5e31796e1cd58393bcfc3422802ea81ca6d170eb6f5496245a1821b1e27a508513ae2e953d175aea429a66ae9dc9bfc35db3803a23f728351bd823
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
PURCHASE ORDER.exe
Resource
win7v20210408
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
PURCHASE ORDER.exe
Resource
win10v20210410
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
smtp.viltroxs.com
-
Port
587
-
Username
-
Password
2muchBAR
Targets
-
- Target PURCHASE ORDER.exe
- Size 835KB
- SHA256 682ea743ceb920ea2f5fa8cb8e8e30aea2aaaaccd90c9cfbeb446a2225e024fe
- MD5 6d06a8c0a9d0c0fb69187d7bdd4d4c03
- SHA1 703e55f988e5608eaaf0e5e3d68e86134c0ad023
- SHA512 095f5250fc5e31796e1cd58393bcfc3422802ea81ca6d170eb6f5496245a1821b1e27a508513ae2e953d175aea429a66ae9dc9bfc35db3803a23f728351bd823
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext